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We consider the class of (N-l-l)-partite states suitable for protocols where there is a powerful paxty, 
the authority, and the other N parties play the same role, namely the state of their system live in 
the symmetric Hilbert space. We show that, within this scenario, there is a "maximally entangled 
state" that can be transform by a LOCC protocol into any other state. In addition, we show how 
to make the protocol efficiently including the construction of the state and discuss security issues 
for possible applications to cryptographic protocols. As an immediate consequence we recover a 
sequential protocol that implements the one to N symmetric cloning. 



INTRODUCTION 

The understanding, classification, quantification and 
use of multipartite entanglement has been one of the 
most challenging issues in the Theory of Quantum In- 
formation during the last decade. Even in the tripartite 
case, strange phenomena start to occur, like the non- 
equivalence of W and GHZ states [1], the possibility of 
distributing entanglement with separable states or 
the existence of unbounded violations for some correla- 
tion Bell inequalitites [3j . Going into the N-partite situa- 
tion only increases the number of interesting phenomena: 
universal states for quantum computation [4], topologi- 
cal entanglement [5], relations with complexity theory [6], 



Associated with the different points of view in the the- 
ory of multipartite entanglement, different entanglement 
measures have been defined, focusing on the different as- 
pects of entanglement: the topological entropy [7] mea- 
sures the amount of topological entanglement in a state 
and is hence appropriate in the context of topological 
quantum computation and error correction; the localiz- 
able entanglement j8j measures the amount of bipartite 
entanglement that can be created between two sites in 
a collaborative scenario and is hence appropriate in the 
context of quantum networks and quantum repeaters; 
there are also measures which intend to be more gen- 
eral, and usually measure the distance (in some sense) 
to the set of separable states, like the relative entropy 
of entanglement, the global robustness of entanglement 
or the geometric measure of entanglement [S]. As it is 
pointed out recursively in the literature [101 HI] ) this zoo 
of multipartite entanglement measures has its roots in 
the impossibility of defining a concept of "maximally en- 
tangled state" in the multipartite setting. 

We will show here that if one imposes some symmetry 
restrictions to the state, motivated by the class of multi- 
partite protocols one wants to implement with it, there is 
still hope to define properly the concept of a "maximally 
entangled state". Here we will concentrate in protocols 



in which there is an authority A, and a set of partici- 
pants pi, . ■ . ,Pn which have to play the same role in the 
protocol. This is the desired situation in a wide variety of 
multipartite protocols, like secret sharing or voting, and 
leads to 

Assumption 1: We will work with (N+l)-partite states 
which are permutational-symmetric with respect to N of 
the parties. 

Assumption 2: To make things simpler we will assume 
that the Hilbert space dimension of the participants is 
2, while the one of the authority will be -f 1, which is 
the smallest possible dimension to purify any mixed state 
among the participants. 

The permutational-symmetry of the state is the quan- 
tum resource, with no classical analogue, which ensures 
that all participants are treated equally and are indistin- 
guishable from the authority point of view. This kind 
of requirements are gaining importance nowadays as pri- 
vacy is really getting an issue in the new e-society. In 
fact, permutational symmetry also appears as a natural 
condition in quantum de Finetti theorems jl2) . 

Within assumptions 1 and 2, we will show that there is 
a "maximally entangled state" |<I>) and an LOCC proto- 
col that transforms this to any other state with the same 
symmetry. Moreover, we will show how all the elements 
of the protocol, including the construction of the state, 
can be done efficiently and discuss some security issues 
concerning possible applications to cryptographic proto- 
cols. Along the way we will reprove the main result in 
[13 from a more general point of view. We will mix basic 
tools from several areas: representation theory, convex 
analysis, Matrix Product States and quantum channels. 

THE MAXIMALLY ENTANGLED STATE 

The unnormalized maximally entangled state can be 
described in a valence bond picture in the following way 
(see Fig. [T]). Assume that we have singlets shared be- 
tween any participant and the authority. Then we project 
the virtual space of the authority in the permutationally 
symmetric subspace, which is A'^ -f 1 dimensional. That 



2 




FIG. 1. Valence bond representation of the maximally entan- 
gled state "1>. Solid circles connected with dotted line denote 
virtual EPR pairs, the big circle represents the projection in 
the Hilbert space Wsym of the authority. 



is, we project onto the space of total spin N/2. This can 
be seen as an star-shape version of the famous AKLT 
state [2]. With a formula, our state will be: 

|*) = (Psym®lp)(|01)-|10))«^. 

Since we can change the singlet by any other maximally 
entangled state by a local unitary in any participant 
qubit, we can assume the same construction starting with 
1 00) -I- 1 11), and we will call |$) to the resulting state. In 
most parts of this letter we will take the later. In this par- 
ticular case, by considering the usual basis in the space of 
the authority, that is \a) = ii,-,iN -jhs\ii--'i-N) , 

ii+...+iN=a 

we get the following explicit formula for |$): 
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Of course, this implies that 1$) 



(1) 

\a)A\a)p 

and therefore |$) is the maximally entangled state along 
the bipartite cut AP. The problem now is that the set 
of participants P is delocalized and therefore one can- 
not use general quantum operations E in P, but only 
those that are of the form Ei (g) • • • (g) Eat. However, in 
many situations, since V i— V^^Ih^ „ is an irreducible 
representation of SU{2), Schur's lemma enables us to re- 
duce to this situation. As we will see below, the price is 
the need for general POVMs, since projective measure- 
ments are no longer sufficient. In any case, the state |$) 
is also maximally entangled in this more restrictive sce- 
nario, since one can construct from it any state with the 
same symmetry using only LOCC. This is the content of 
the following 

Theorem 1. There is a LOCC protocol, given below, 
with one way communication that allows the authority 
to transform |$) to any known pure state \ip) that is 
permutationally symmetric in the Hilbert space of the 
participants. 



Transformation protocol 

1. Given the schmidt decomposition of the state 

\^) = EtoA.N)A|^.)p, let = Elo>^M){^n 
where * means complex conjugation. The au- 
thority A measures with measurement operators 
{Fu = VN + lTr{U)p*Tr{W)} his part of the sys- 
tem where the Us are distributed with respect to 
the Haar measure in SU (2) and tt is the (unique) 
irreducible representation of SU (2) in a iV + 1 di- 
mensional space given by V ^"^^l-Hsym- 

2. A broadcasts the result of the measure Uq. 

3. Each participant applies to his system the unitary 
YI/qY to obtain the state \ip). 

This Theorem shows also that our state could be of use 
in situations (like secret sharing or key distribution) in 
which one authority is assumed to distribute some quan- 
tum state among the set of participants. One advantage 
now is that only permutationally symmetric states can 
be constructed and all the participants are then sure that 
they are treated in equal footing. 

Proof of the Theorem. 

The result relies essentially on Schur's lemma, which 
guarantees that the measure in step 1 of the protocol is 
indeed a measure since 

tt^Ih. = / 7:iU)p*7:iU^)dU . (2) 

J-^ + i- Ju(2) 

It only remains to show that the state after the pro- 
tocol is the one we want, which is a routine calculation. 
Suppose the result of the measure is a, then the state 
after the measure reads 
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(3) 



1=0 



Now, by the definition of tt and the fact that |00) + |11) 
\s U ® YUY invariant for any U G U{2), we get that 
tt{U) (g> (rf7r)®^|$) = 1$) for every U. Using ^ is 
now trivial to conclude that ([S]) is indeed equal to 
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'E 

1=0 



(4) 



Therefore, after knowing the result a, each partici- 
pant can apply YU\Y to his system and to obtain the 
joint state \ip) and A can apply the unitary that takes 
^(C/„)|^*) to I*) □. 

Considering to be a product state between the au- 
thority and the participants we have 



3 



Corollary 2 (State-transfer). Given |$), there is 
a LOCC protocol, given below, with one way communi- 
cation that allows the authority to create in the Hilbert 
space of the participants any permutationally symmetric 
pure state \tf). 

The first thing to notice here is that the measure- 
ment required in step 1 of the state-transfer protocol has 
an infinity number of outcomes, which in turns implies 
that one needs an infinite dimensional ancilla in order 
to implement it with orthogonal projectors. The way 
around this problem is by considering a set of unitaries 
{f^i}i=i C U{2) and a set of scalars uji > Q such that 
w,; = 1 and 

Y,o^,<U,)p*n{ul)^ ( n{U)p*^{U^). (5) 

4=1 JSU(2) 

This allows to replace the measurement in step 
1 of the protocol by the one with operators 
{F, = ^u:,{N + Ef=o XM){V*MU})}. Using 

Caratheodory's Theorem it is not difficult to show that, 
in this case, k can indeed be taken < [N + 1)^ + 1 and 
hence polynomial in N (see Appendix). 

Since in step 2, the authority will broadcast the out- 
come of the measurement, it is interesting to note that, 
from Q , the probability of obtaining the output i is uJi 
and hence independent of the state \ f) being transferred. 
This is crucial in cryptographic applications, like secret 
sharing, in which the public communication should give 
no information at all. The main problem with this state- 
transfer protocol is that the measurement in A, although 
being local, depends on the state to transfer, and there- 
fore it does not work in situations in which the authority 
wants to transfer an unknown state. However, thanks to 
Schur's lemma, it is possible to design a teleportation-like 
protocol that also works under our assumptions and al- 
lows A to teleport with LOCC any permutationally sym- 
metric unknown state to P. The procedure is a particular 
case of the situation described in [15] and can be resumed 
in: 

Teleportation-like protocol 

1. The initial joint system is \<f)Ai ® \^)a2P^ where 
\lp) is the state to be teleported. 

2. The authority A measures with measurement oper- 
ators {Fu + l)n{U)A^®lAM{^<U^)A^® 

IA2} his part of the system where the Us are dis- 
tributed with respect to the Haar measure in IA{2) 

3. A broadcasts the result of the measure Uq. 

4. Each participant applies to his system the unitary 
[/q to obtain the state 



Exactly as before, one can use a discrete set of unitaries 
to avoid the continuous parameter. In this case equation 
([5| should hold for any matrix p G Mj^i+i- By a simi- 
lar reasoning one can show that the number of unitaries 
needed is upper bounded by 4(A^+ 1)"* + 1. Nevertheless, 
weighted N-designs in U{2) already solve this problem 

/ 2N + 3 \ 

and such a design exists with < ( ^ 1 unitaries 

|16) . Likely, not only the output of the measurement 
is completely independent of the state to be teleported, 
but also the set of unitaries itself. Finally, it is trivial to 
see that the same protocol allows to teleport arbitrary 
unknown mixed states supported on the symmetric sub- 
space. 

At the light of this result, it seems that if we restrict 
to our Assumptions 1 and 2 everything works essentially 
as in the bipartite case, in which we start with the max- 
imally entangled state |$) = \a)A\ci)p- As we com- 
mented above, there is at least one important difference. 
In the protocols presented here we use POVMs instead 
of projective measurements. It is interesting to note that 
it is indeed impossible to reduce to projective measure- 
ments, as it is shown in the following 

Theorem 3. It is not possible to implement the 
teleportation-like protocol using projective measure- 
ments. 

Proof: Let us assume that it is possible to teleport from 
A to P the unknown permutationally symmetric state \lp) 
with projective measurements. It implies that there must 
exist a decomposition of the form 

W)a^\'^)a2P = ^y/P^\r)A<^'^{Ur)\v), 

where |r) is an orthonormal set in the joint system 
A = A1A2. On one hand, if we trace out system A we 
get lH,y„, = Y.r^iUr)\f){fh{UrY , which implies that 
\R\ > + 1. On the other hand, if we trace out system 
P, we get \ip){ip\ ® = Er,serM<UprM\r){sl 

which implies that 

r,s 

and hence ti (UjUr) = Srs- But this is not possible since 

PROPERTIES OF THE STATE 
Characterization by symmetries 

Just as the state |00) -f can be characterized as 
the unique pure two-qubit state that is invariant under 



FIG. 2. Circuit for creating the state $ in a sequential way, 
where each box implements a unitary Vji] between the ancilla 
a and participant i together with a swap operation between 
them. 

the action oi U ^ U for any unitary U, one can show 
that our state |<i>) is the unique pure state, within As- 
sumptions 1 and 2, that is invariant under the action of 
t/®^ O tt{YUY) for any unitary U € U{2), where tt is 
the (unique) unitary irreducible representation of SU (2) 
in an iV + 1 dimensional space given by V V'^'^\-h,^^- 

Creation of the state 

Is there an efficient way, that is, polynomial in the 
parameters, to construct the 'maximally entangled state' 
1$)? The answer is yes and comes from the following 
Matrix Product State representation: 

ao,ii,...,iN 

where 

401= (0,...,0, 1,0,...,0), 

ao 

Using the result in [17 , this immediately gives an efficient 
way to create the state |$) in the following sequential 
manner (see Fig. [2|: 

\<f)Ap\0)a = V[O]---VlN]\0---0)Ap\0)a, 

where a is an ancillary system of dimension N+1 and Vy] 
is the unitary gate, involving only participant j (0 being 
the authority) and the ancilla a, given by 

The condition J^i- ^4''.' = 1 makes Vy] unitary [T7] . 
Of course, one may take the authority system as the an- 
cilla and then obtain the state |$) after one round of 



FIG. 3. Sequential circuit implementing cloning. Firstly, the 
maximally entangled state is created sequentially between the 
ancilla and the participants. Secondly, the ancilla is mea- 
sured. Finally, depending on the result of the measurement, 
local unitary corrections are applied in the participants. 

two body interactions between the authority and each 
participant. 

Sequential cloning 

The fundamental no-cloning theorem [TS] states that 
it is impossible to clone unkonwn quantum states. How- 
ever, as one can infer from the excellent review [19j , there 
are many situations in cryptography in which the opti- 
mal approximate cloning is important. In |I3| (see |20| 
for a refinement), the authors use Matrix Product State 
theory to design a protocol which implements the 1 N 
symmetric universal quantum cloning in the following se- 
quential manner (see Fig. |3|. 

Step 1 An ancilla of dimension 0{N) interacts sequentially 
with each qubit. 

Step 2 A final measurement is implemented in the ancilla. 

Step 3 A local unitary correction is made in the qubits 
depending on the output of the measurement. 

Since in the symmetric universal cloning the final state 
is supported in the symmetric subspace one can use step 
1 to create our maximally entangled state and steps 2,3 
to teleport the cloned state to all the qubits with our 
teleportation-like protocol. Of course, the same can be 
done for any protocol in which the final state lives in the 
symmetric subspace. 

CHECKING SYMMETRY 

Since the participants want to keep their privacy, they 
must have a way to be sure that the state they receive 
from the authority is permutational-symmetric or, even 
more, is supported in the symmetric subspace. The lat- 
ter is indeed equivalent to implement the measure of the 
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FIG. 4. Gap of <I> as a function on the number of participants 
(red) compared with the values of its regression function when 
considering a power regression model (blue). The exponent 
of the function is —2.77. 



total spin in N spin-^ particles. A simple way to do so 
is the following protocol which requires very few compu- 
tational power to the participants: 1 qubit channel from 
participant i to participant i+1 and the ability of imple- 
menting 2-qubit measures. The protocol aims to (i) do 
nothing if the original state was supported on the sym- 
metric subspace, (ii) end up with a state supported on 
the symmetric subspace. 

The protocol repeats R times the following round. 
With probability participant i send his qubit to 

participant z -I- 1 which check if the i,i + 1 qubits arc 
supported in the symmetric or the antisymmetric sub- 
space. If it is the latter, he constructs the mixed state 
over the symmetric subspace and sends the z-th qubit 
back to participant i. 

The quantum channel implemented is $ = 



^+lPsym + l/4(*_|p,,,+ i|* , 

that this channel verifies (i). (ii) is consequence of the 
fact that all fixed points of $ are supported in the 
symmetric subspace. To see this we rely on |21j . which 
characterizes the fixed points as those matrices p that 
are fixed point of Ti.i+i for any i = 1,...,N, these are 
density matrices that are supported in the symmetric 
subspace of any pair of consecutive participants. 

The efficiency of the protocol, that is, how it ap- 
proaches a fixed point with the number of iterations is 
governed by the modulus of the second largest eigenvalue 
of $. Numerically (see Fig. |4| the second eigenvalue 
of the protocol after O(iV^) rounds seems to behave as 
(1 — cN^^-'^'^)'-"-^ \ where c is a constant, which is expo- 
nentially small in N. 

Alternatively one can use the general procedures con- 
cerning secure multipartite quantum computation in |22j . 



'-All\i,i+l 



where 



T^,^+lip) = 

It is clear 



CONCLUSION 

We have considered the set of multipartite states in 
which the system of the participants live in their sym- 
metric subspace and whose state is purified by the au- 
thority. Among this set we find a maximally entangled 
state which, thanks to Schur lemma, can be transformed 
into any other and allows to make teleportation from 
the authority to the participants. Nevertheless, POVMs 
are needed for both applications. We have shown how 
to create this maximally entangled state sequentially in 
an efficient way thanks to its Matrix Product State rep- 
resentation. Putting together the sequential generation 
and the teleportation result, we reprove that any protocol 
in which the final state lives in the symmetric subspace 
can be done sequentially in an efficient way. This is il- 
lustrated with the 1 ^ N symmetric universal quantum 
cloning. Moreover, we have argued that the result of the 
measures in the protocols does not reveal information 
and that the participants can make sure that their state 
lives in the symmetric subspace. 



ACKNOWLEDGEMENTS 

We thank Sofyan Iblisdir, Juanjo Garcfa-Ripoll and 
David Perez-Garcia for their useful comments and dis- 
cussions. This work has been partially funded by the 
Spanish grants MTM2011-26912 and QUITEMAD and 
the European project QUEVADIS. 



[1] W. Diir, G. V idal, and J. I. Cirac, |Phys. Rev. A, 62, 
062314 (2000)' 

[2] T. S. Cubitt, F. Verstraete, W. Diir, and J. I. Cirac, 

[PhysTR ev. Lett., 91, 037902 (2003) 
[3] D. Perez-Garci'a, M. Wo lf, C. Palazuelos, I. Vil- 
lanueva, and M. Junge, [Communications in Math-| 
em atical Physics, 279, 455 (2008)', ISSN 0010-3616, 
10.1007/s00220-008-0418-4; J. Brief and T. Vidick, "Ex- 
phcit lower and upper bounds on the entangled value of 
multiplayer XOR games," (2011), http://arxiv.org/ 
Tbs/1108.5647vl "* 



[4] R. Raussendorf and H. J. Briegel, |Phys. Rev. Lett., 86, 
5188 (2001) 

[5] A. Kitaev, Annals of Physics, 321, 2 (2006)| ISSN 0003- 
4916. 

[6] A. W. Harrow and A. Montanaro, Foundations of Com- 

0, 633 



puter Science, IEEE Annual Symposium on, 
(2010)1 ISSN 0272-5428^ 



[7j A. Kitaev and J. Preskill, |Phys. Rev. Lett., 96, 110404 



(20 06) 

[8] M. Popp, F. Verstraete, M. A. Martfn-Delgado, and J. I. 

Cirac, Phys. Rev. A, 71, 042306 (2005) 
[9] T.-C. W ei~aJia''PrHrGoldbart, Phys. Re v. A, 68, 042307] 

(2003)1 



6 



TTTT 



13 



[141 



[161 



M. B. Plenio and S. Virmani, Quantum Info. Comput. 
Y, 1 (2007), ISSN 1533-7146. 



Horodecki, P. 



Horodecki, 
Mod. Phys.. 



M. Horodecki, 
81, 865 (2009)j 



and 



Horodecki, Rev. ^ 

Konig and R. Renner, [Journal of Mathematical] 



and 



R. 
K. 
Jl. 

Physics, 46, 122108 (2005) 

Y. Delgado, L. Lamata, J. Leon, D. Salgado 
E. Solano, Phys. Rev. Lett., 98, 150502 (2007)) 
I. Affleck, T. K ennedy, E. H. Lieb, and H. Tasaki, [PiysT 
Rev. Lett., 59, 799 (1987) 

S. L. Braunstein, G. M. DAriano, G. J. Milburn, and 
M. F. Sacchi, Phys. Rev. Lett., 84, 3486 (2000) 
A. Roy and A. Scott, Designs, Codes and Cryptography, 
53, 13 (2009) , ISSN 0925-1022, 10.1007/sl0623-009-9290- 



and J. I. 



2. 

[17] D. Perez-Garcia, F. Verstraete, 
Cirac, Quantum Inf Comput, 7 
[18] W . K. Wootters and W. H. Zurek, [Nature, 299, 802 



M. M. Wolf, 
1 (2006). 



_(19 82) 

[19] V. Sca rani, S. IbHsdir, N. Gisin, and A. Acm, [Rev. Mod 

Phys., 77, 1225 (2005), , 
[20] L. Lamata, J. Leon, D. Perez-Garcfa, D. Salgado, and 

E. Solano, 'Phys. Rev. Lett., 101, 180506 (2008) 

F. Verstraete, M. M. Wolf, and J. Ignacio Cirac, 
>hys, 5, 633 (2009), 

C. Crepeau, D. Gottesman, and A. Smith, in Proceedings^ 
of the thiry-fourth annual ACM symposium on Theory oj 



Nat 



_computing, STOC '02 (ACM, New York, NY, USA, 2002) 
pp. 643-652, ISBN 1-58113-495-9; M. Ben-Or, C. Cre- 
peau, D. Gottesman, A. Hassidim, and A. Smith, Foun- 
dations of Computer Science, IEEE Annual Symposium 

Tn, 0, 249 (2006), ISSN 0272-5428. 

C. Caratheodory, Rendiconti del Circolo Matematico di' 
Talermo (1884 - 1940), 32, 193 (1911), ISSN 0009- 725X, 
10.1007/BF03014795. 



Appendix 

We show in this appendix that given a density ma- 
trix p g Herni('Hsym) there exists a set of unitaries 
{^i}j-=o^^'' C W(2) and a set of scalars Ai > such that 
J2i Ai = 1 and 



(N+iy 

E 

1=0 



X^tt{U,)ptt(U]) 



SU(2) 



Tr(U)pTT{U^) 



Proof: Let T : U(2) HermCHsym) be defined by 
U ^Tu where Tu = U'^^ pU'^^^ . Let S e Herni(-Hsym) 
be the result of applying the twirling operator to p, 
that is, S := Juf,ui2) U'^^pU'^^UU. We have shown 
that S — ./i ■ . Let h be a linear functional 
lerm('Hsym) whose positive closed half-space contains 
Ini(r) then 



in (B 

of Hen 



h{Tu)dU > 0, 



ueu{2) 



so h{S) e co(Im(T)). Moreover, if /m(r) ^ ker{h) then 
there is an e > such that Im(T) meets /i~^((e, oo)). So 
the set V ={ho r)-i((e, oo)) of U(2) is nonvoid and, by 
the continuity of T, open. Therefore h{S) > e/i(V^) > 0. 
Hence 

S e relintco(Im(r)) C co(Im(r)). 

Then, applying Caratheodory's theorem |23) . there ex- 
ist functions C/q, t/i, C/(Ar+i)2 G U{2) such that S G 
co{Tuo,Tuj^, ...,Tui^^^^.^2}- That is, there exist A^ > 0, 
U, G U{2) for i = 0, {N + 1)^ such that = 1 and 



i=0 



□ . 



